How to Report Cyber Crime in India: A Step-by-Step Guide

What Is Cyber Crime Under Indian Law?

Cyber crime broadly refers to any offence committed using a computer, mobile device, or the internet. In India, cyber crimes are primarily governed by the Information Technology Act, 2000 (IT Act) and its 2008 amendments, along with provisions of the Bharatiya Nyaya Sanhita, 2023 (BNS), which replaced the Indian Penal Code. Key offences include identity theft (Section 66C, IT Act), phishing and fraud (Section 66D, IT Act), cyber stalking, online harassment, publishing obscene material (Section 67, IT Act), hacking (Section 43 and Section 66, IT Act), and financial fraud such as UPI scams or credit card theft.

The National Cyber Crime Reporting Portal at www.cybercrime.gov.in is the Government of India's dedicated online platform for registering cyber crime complaints. It is operated by the Ministry of Home Affairs and feeds into the National Crime Records Bureau (ncrb.gov.in). You can also find qualified cyber law advocates if you need professional guidance.

Types of Cyber Crimes You Can Report

The portal categorises complaints into two broad groups:

• Women and Child-Related Crimes: Child pornography, rape or gang rape imagery, content that sexually exploits women or children. These reports are treated with higher urgency and confidentiality.
• Other Cyber Crimes: Online financial fraud, social media fraud, hacking, data theft, ransomware, cyber bullying, email phishing, SIM swapping, OTP fraud, job fraud, and matrimonial fraud, among others.

If your complaint involves imminent physical danger, always call 112 (emergency helpline) first before filing online.

Before You File: Evidence You Must Gather

Strong documentation significantly improves the effectiveness of your complaint. Collect the following before you begin:

• Screenshots of fraudulent messages, emails, social media posts, or transaction screens (with timestamps visible)
• Bank account statements showing unauthorised debits
• Transaction IDs, UTR numbers, or UPI reference numbers
• URLs or links of the offending websites or social media profiles
• Email headers from phishing or fraud emails
• Caller ID details or recorded call logs (where legally permissible)
• Any written communication (WhatsApp chats, SMS) from the accused

Tip: Act quickly. In cases of financial fraud, reporting within the golden hour — ideally within 1 hour of the incident — to the National Cyber Crime Helpline 1930 can help authorities freeze the fraudulent transaction before funds are transferred further.

Step 1 — Call the National Cyber Crime Helpline 1930

For financial cyber fraud (UPI scams, net banking fraud, credit or debit card fraud), your very first step should be to call 1930, the official cyber crime financial fraud helpline. This is operational 24x7 across India. The operator will log your complaint and coordinate with banks and payment gateways to attempt to freeze the disputed amount. Note your complaint reference number carefully.

Step 2 — File an Online Complaint at cybercrime.gov.in

Visit www.cybercrime.gov.in and follow these steps:

• Click 'File a Complaint' on the homepage.
• Select the relevant category: Women/Child Related Crime or Other Cyber Crime.
• For Women/Child Related Crime, you may report anonymously or with your identity.
• For Other Cyber Crime, click 'Report Other Cyber Crime', then click 'File a Complaint'.
• Register yourself using your mobile number (OTP verification required).
• Fill in the complaint form: provide your personal details, incident details, accused details (if known), and description of the offence.
• Upload supporting evidence such as screenshots, documents, and transaction records.
• Submit the form and note your Complaint Reference Number (CRN) for tracking.

There is no fee to file a complaint on this portal. The complaint is routed to the relevant state cyber cell or district police for investigation.

Tip: Use a browser like Chrome or Firefox. Avoid filing from a public or shared device, as the process involves your personal details.

Step 3 — Track Your Complaint Online

After filing, you can log in to the same portal using your registered mobile number to track the status of your complaint. The portal displays whether the complaint has been acknowledged, under investigation, or converted into an FIR. If no action is taken within a reasonable period (typically 15–30 days depending on state police workload), you may escalate.

Step 4 — Register an FIR at Your Local Police Station or Cyber Cell

An online complaint on cybercrime.gov.in is a preliminary report; it may or may not automatically become a First Information Report (FIR). To ensure a formal FIR is registered — which is necessary for prosecution under the IT Act or BNS — you should visit your nearest police station or the designated Cyber Crime Cell in your city or district.

Under Section 173 of the Bharatiya Nagarik Suraksha Sanhita, 2023 (BNSS) (formerly Section 154 of the CrPC), the police are obligated to register an FIR for cognisable offences. Most serious cyber crimes (hacking, identity theft, financial fraud above a threshold) are cognisable offences. If a police station refuses to register your FIR, you can send your complaint by post to the Superintendent of Police of the concerned district, or approach a Judicial Magistrate under Section 175 of the BNSS.

Many cities have dedicated cyber crime police stations. For example, metropolitan areas like Delhi, Mumbai, Bengaluru, Hyderabad, and Chennai have established cyber cells with trained officers. Check your state police website for the nearest cyber cell address.

Step 5 — Escalate to State or National Authorities If Needed

If local police are unresponsive, you have several escalation options:

• State Cyber Crime Cell: Each state has a nodal Cyber Crime Cell. Contact details are usually available on the state police website.
• CERT-In (Indian Computer Emergency Response Team): For reporting cyber security incidents affecting critical infrastructure or large-scale data breaches, report to CERT-In. Their reporting portal is managed by the Ministry of Electronics and Information Technology.
• Reserve Bank of India (RBI) Ombudsman: For unresolved banking fraud complaints, you may approach the RBI Integrated Ombudsman Scheme.
• Centralised Public Grievance Redress System: You can also escalate grievances through pgportal.gov.in, the government's centralised grievance portal.

Legal Provisions and Penalties for Cyber Crimes

Understanding the legal framework helps you frame your complaint accurately:

• Section 43, IT Act: Unauthorised access, damage to computer systems — civil liability for compensation.
• Section 66, IT Act: Computer related offences — imprisonment up to 3 years or fine up to Rs. 5 lakh.
• Section 66C, IT Act: Identity theft — imprisonment up to 3 years and fine up to Rs. 1 lakh.
• Section 66D, IT Act: Cheating by impersonation using computer — imprisonment up to 3 years and fine up to Rs. 1 lakh.
• Section 67, IT Act: Publishing obscene material electronically — imprisonment up to 3 years and fine up to Rs. 5 lakh (first conviction).
• Section 318, BNS, 2023: Cheating (including online fraud) — imprisonment up to 7 years and fine.

Consult our legal guides section for more detailed explanations of cyber law provisions in India.

Special Provisions for Women and Children

The cybercrime.gov.in portal gives priority to complaints involving child sexual abuse material (CSAM) and crimes against women. Such complaints can be filed anonymously. The Protection of Children from Sexual Offences Act, 2012 (POCSO Act) and Section 67B of the IT Act prescribe stringent penalties for child-related cyber crimes. Investigating officers handling such cases are required to follow special victim-sensitive procedures.

Common Mistakes to Avoid

• Delaying the report: Waiting too long reduces the chance of recovering funds or tracing the accused.
• Not saving evidence: Deleting suspicious messages or emails before filing removes key proof.
• Filing in the wrong category: Misfiling can delay routing of your complaint to the correct authority.
• Sharing OTPs or passwords with police impersonators: Fraudsters sometimes pose as cyber cell officers. Real police will never ask for your OTP or bank PIN.
• Assuming the online complaint is an FIR: An online complaint on the portal is not automatically an FIR. Follow up to ensure it is converted into one if required for prosecution.

When to Consult a Cyber Law Advocate

While you can file an initial complaint on your own, professional legal assistance becomes essential in several scenarios: when your FIR is not being registered despite repeated attempts; when you need to pursue civil compensation under Section 43 of the IT Act before the Adjudicating Officer appointed under the IT Act; when the accused is operating from another state or country; when the crime involves reputational harm and you need to pursue defamation or injunctive relief; or when you are facing a counter-complaint or false accusation online.

You can search for experienced cyber law practitioners through our advocates directory or browse law firms specialising in cyber law across India.

Realistic Timelines and What to Expect

There is no single fixed timeline for cyber crime investigations — it varies by the nature of the offence, state police capacity, and cooperation from service providers. Typically: an online complaint acknowledgement takes 24–72 hours; FIR registration (once you approach the police station) should occur promptly for cognisable offences; investigation and chargesheet filing timelines vary widely from weeks to several months for complex cases involving forensic analysis. Financial fraud recovery through the 1930 helpline mechanism depends on how quickly funds can be frozen, which is why speed is critical.

This guide is general legal information, not legal advice. Laws and procedures may vary by state and change over time. Consult a qualified advocate for advice specific to your situation.

Step-by-Step Process